Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3234332e302f32342d3234203d3e203134373935.roa
File:                     3136312e3133312e3234332e302f32342d3234203d3e203134373935.roa (raw, json)
Hash identifier:          R5SNNGjbxmye+tCaQ1c5RwTH6zL7F/703r8wscdeFEE=
Subject key identifier:   DF:1B:CF:21:A6:DB:FB:A1:D4:5D:89:24:58:5E:96:3C:8C:99:8F:5A
Certificate issuer:       /CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
Certificate serial:       607BB66C25EFCD11EF28FFEA3A36839026B58C82
Authority key identifier: F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3234332e302f32342d3234203d3e203134373935.roa
Signing time:             Tue 05 Mar 2024 18:22:54 +0000
ROA not before:           Tue 05 Mar 2024 18:17:54 +0000
ROA not after:            Tue 04 Mar 2025 18:22:54 +0000
asID:                     14795
IP address blocks:        161.131.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7b:b6:6c:25:ef:cd:11:ef:28:ff:ea:3a:36:83:90:26:b5:8c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
        Validity
            Not Before: Mar  5 18:17:54 2024 GMT
            Not After : Mar  4 18:22:54 2025 GMT
        Subject: CN=DF1BCF21A6DBFBA1D45D8924585E963C8C998F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:af:1e:ae:d8:f8:b4:19:49:39:73:c7:51:
                    66:ea:a5:7d:51:7d:0d:b0:7a:bc:e5:c0:45:1b:6b:
                    a8:d5:1a:52:d6:8a:41:0f:d8:3d:59:77:3b:4c:2d:
                    b4:4b:39:82:af:0d:80:78:3d:81:7c:7b:9b:99:20:
                    70:03:bf:4c:f6:ed:86:63:5a:51:a0:b2:92:6c:9e:
                    27:5c:9b:4d:8e:d2:65:a2:40:2a:f1:79:84:b9:30:
                    71:0a:ec:e2:60:d7:b6:ee:ef:18:7f:1c:54:00:08:
                    b2:3c:d9:f9:99:ff:49:95:36:9b:99:08:ce:f2:21:
                    0d:b5:af:20:41:ee:02:5b:4f:4c:b3:81:86:2f:41:
                    fa:43:0f:34:04:70:cf:5d:20:7d:e1:7b:da:8d:93:
                    45:3b:4e:80:9b:e4:01:e9:8c:f1:80:92:6b:64:42:
                    fb:16:fa:74:9c:43:cc:41:8f:20:8f:ec:81:e9:3c:
                    12:72:bb:95:f9:47:f5:44:2c:30:1d:ce:f5:a7:62:
                    62:94:ff:20:7c:92:84:60:de:12:86:b5:be:37:25:
                    e9:04:f3:6f:6f:70:f5:59:37:b6:96:76:73:b0:db:
                    14:36:ae:e2:25:a3:19:3f:23:3f:e9:6d:3c:79:ef:
                    08:35:6a:db:75:2a:9f:2c:f2:8d:66:03:9d:74:26:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1B:CF:21:A6:DB:FB:A1:D4:5D:89:24:58:5E:96:3C:8C:99:8F:5A
            X509v3 Authority Key Identifier:
                keyid:F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3234332e302f32342d3234203d3e203134373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:d4:5e:87:11:76:44:a2:43:0b:b9:f0:4b:46:f5:02:10:ba:
         d5:c2:7c:41:0e:ed:8f:cf:62:42:c7:67:bd:99:99:96:83:72:
         87:79:ba:d8:5f:80:73:98:3c:64:d5:aa:96:dd:71:6b:0b:30:
         84:75:ee:23:d5:86:f9:06:f4:18:78:ca:ab:40:10:05:c7:2b:
         6a:23:b3:ee:29:b3:33:cd:54:69:aa:d3:c1:c7:91:75:a9:5f:
         d4:7a:6e:84:72:25:4b:db:48:d0:b9:30:d5:d6:09:f7:3c:73:
         8f:dd:89:b7:6a:58:ac:bc:49:87:54:cb:ec:41:ee:e8:49:b1:
         06:dd:7f:79:4e:fd:33:b5:cf:28:5d:4e:a3:1f:c6:18:bc:d2:
         78:e9:59:e3:6a:78:c4:f8:e1:ab:a2:c5:e9:be:a6:1e:6e:51:
         2a:f2:3a:a0:b3:b6:b8:64:c5:a7:ee:c8:38:d2:24:fa:89:da:
         91:39:88:5c:35:03:f0:77:2f:8a:9f:65:43:fa:a2:a1:f5:4e:
         cd:e1:27:c2:2b:b3:f6:5d:3a:96:69:4e:1c:16:80:cd:d8:ef:
         45:da:f3:a2:e1:20:81:57:36:38:31:2e:d7:49:08:8b:ca:fe:
         c6:64:d7:9c:1c:6c:cd:6a:9e:c7:13:4d:69:ec:f8:82:17:c6:
         55:1e:7a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org